lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 4 Nov 2009 21:15:31 +1100
From: psz@...hs.usyd.edu.au
To: gombasg@...aki.hu
Cc: bugtraq@...urityfocus.com, dan@...htwave.net.ru, jim@...n.com,
	marco@....nl, mrex@....com, pavel@....cz
Subject: Re: /proc filesystem allows bypassing directory permissions on

> Irrelevant. The statement was ...

Sorry, you misunderstood, that was not the statement.

The statement was that with /proc you can "do" things you shouldn't.

We have seen what those things are. Sadly(?) so far none seem very
dangerous, or common, or conducive to mayhem: no urgency to fix.

Cheers, Paul

Paul Szabo   psz@...hs.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ